Thank you all for the assist, we will be moving one of the locations to a separate subnet. Much appreciated.
-- Christopher Tyler MTCRE/MTCNA/MTCTCE/MTCWE Total Highspeed Internet Services 417.851.1107 ----- Original Message ----- From: "Gilbert T. Gutierrez, Jr. via Af" <af@afmug.com> To: af@afmug.com Sent: Wednesday, October 15, 2014 3:54:59 PM Subject: Re: [AFMUG] SM Isolation question As others have said, put the two locations on different subnets. That will get around the issue. You could also segment using Vlans which would allow you to retain DHCP if you use DHCP. We always have Isolation enabled. We happen to use a few vlans to further segment the traffic and if a customer has 2 SMs on the same AP, we make sure that the public facing IPs are on different networks. Gilbert On 10/15/2014 12:23 PM, Christopher Tyler via Af wrote: > We have a customer that has two SM's on the same AP at separate physical > locations (home and office). The have a DVR at each location that they want > to view. Everything is configured properly on their end to view the DVR's on > port 80 through their routers. Problem is that we have SM isolation turned > on with option 2 to forward packets upstream and they want to see the home > when at the office and the office when at home. > > So I set up a mangle rule in my Mikortik to mark the packets with a routing > mark based on the SRC and DST addresses, and then used a static route for > anything what that mark and send it back to the AP port. It doesn't work, > what am I doing wrong, any suggestions short of disabling SM isolation? > >
